Spray is a high-performance, intelligent, and customizable HTTP directory fuzzing tool designed for precise and efficient web security testing.
最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.
Spray is primarily used by security professionals and penetration testers to discover hidden directories, backup files, and sensitive information on web servers through intelligent fuzzing techniques. It supports multi-target scanning, custom dictionary generation, and advanced fingerprinting, making it ideal for comprehensive web security assessments and automation.
While Spray offers superior performance and advanced features, actual speed gains depend on network conditions. Proxy support is available but not recommended due to significant performance degradation. Users should leverage breakpoint resume for long scans and customize filtering rules for optimal results. Integration with third-party fingerprint libraries enhances detection accuracy.
git clone --recurse-submodules https://github.com/chainreactors/spray
cd spray
go mod tidy
go generate
go build .spray -u http://example.com -d wordlist1.txt -d wordlist2.txt
Perform directory fuzzing using dictionaries from specified wordlists.
spray -u http://example.com -w "/aaa/bbb{?l#4}/ccc"
Generate and fuzz directories based on a mask pattern.
spray -u http://example.com -r rule.txt -d 1.txt
Generate dictionary entries using rules and perform fuzzing.
spray -l url.txt -r rule.txt -d 1.txt
Batch fuzz multiple targets with rule-based dictionary generation.
spray --resume stat.json
Resume a previously interrupted scan from saved state.
spray -l url.txt --check-only
Run in check-only mode for targeted single-page information gathering with optimized performance.
spray -u http://example.com --finger
Enable extended fingerprint detection including fingerprinthub and wappalyzer.
spray -u http://example.com --crawl
Enable crawling to discover additional URLs for fuzzing.
spray -u http://example.com --bak --common
Scan for backup files and common generic files.
spray -u http://example.com -a
Enable all available plugins and features.